In re Appln. of Girault et al. 
Application No. 10/590,794 

(Revised) Response to Office Action of October 24, 2008 
Listing of Claims: 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

Claim 1 (currently amended): A method for performing a cryptographic operation in a device 
under [[the]] control of a security application , in which a cryptographic value (y) is produced 
in the device, by a calculation utilizing a processor comprising at least one multiplication 
operation between a first (fj^) and a second (f?) factor two factors including a part at least of a 
secret key (s) associated with the device, the method comprising: 

selecting and memorizing the first factor as wherein the first of the two factors of the 
multiplication has a determined number of bits L in binary representation; [[,]] 
selecting and memorizing the second factor so as to comprise a the second of the two 
factors of the multiplication is constrained so that it comprises, in binary 
representation having [[,]] several bits set to 1 with, between each pair of 
consecutive bits set to 1, a sequence of at least L - 1 bits set to 0; [[,]] 
selecting and memorizing successive binarv versions of the first factor bv shifting said 
first factor in accordance with the positions of the bits set to 1 of the second 
factor; 

carrying out the multiplication operation bv assembling successive shifted versions of 

the selected and memorized shifted binary versions of the first factor, thereby 
allowing said cryptographic operation to be conducted in the absence of anv 
completed effective multiplication operation due to said shifting and 
assembling, and the multiplication is achieved bv assembling binarv versions 
of the first factor, respectively shifted in accordance with the positions of the 
bits set to 1 of the second factor . 

Claim 2 (previously presented): The method as claimed in claim 1, in which the secret key (s) 
forms part of an asymmetric cryptographic key pair associated with the device . 

Claim 3 (previously presented): The method as claimed in claim 1 , in which the device 
comprises a chip including hard-wired logic for producing the cryptographic value. 
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Claim 4 (previously presented): The method as claimed in claim 1, in which the calculation 
of the cryptographic value furthermore comprises an addition or a subtraction between a 
pseudo-random number (r) and the result of the multiplication. 

Claim 5 (currently amended): The method as claimed in claim 4, in which the first and 
second factors (fj^, f? [[s, c]]) and the pseudo-random number (r) are dimensioned so that the 
pseudo-random number is greater than the result of the multiplication. 

Claim 6 (original): The method as claimed in claim 5, in which the number of bits set to 1 of 
the second factor is chosen at most equal to the largest integer less than or equal to si/L, 
where si is a predefined threshold less than the number of bits of the pseudo-random number 
(r) in binary representation. 

Claim 7 (previously presented): The method as claimed in claim 1, in which the two factors 
of the multiplication include, as well as said part of the secret key (s), a number (c) provided 
to the device by the security application executed outside the device. 

Claim 8 (previously presented): The method as claimed in claim 1, in which the two factors 
of the multiplication include, as well as said secret key (s), a number (c) provided by the 
device. 

Claim 9 (currently amended): The method as claimed in claim 1, in which said part of the 
secret key (s) is said first factor (f^) of the multiplication. 

Claim 10 (currently amended): The method as claimed in claim j_ [[9]], the method further 
comprising: 

calculating in which said binar>^ versions are disposed in rospoctivo intervals of like 
size in bits, said size corresponding to the total size of a usable space [[,]] 
divided by the number of bits set to 1 of the second factor of the multiplication 
operation; [[,]] 
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placing each shifted binary version being placed in its respective interval as a ftinction 

of a shift in accordance with the positions of the bits set to 1 of the second 
factor. 

Claim 1 1 (currently amended): The method as claimed in claim 1, in which said part of the 
secret key (s) is the second factor (f?) of the multiplication. 

Claim 12 (original): The method as claimed in claim 11, in which the secret key (s) is stored 
in a memory support of the device by coding the positions of its bits set to 1 . 

Claim 13 (currently amended): The method as claimed in claim 1 1, in which the secret key 
(s) is stored in a memory support of the device by coding numbers of bits separating 
respectively lower bounds of intervals of (S-l)/(n-l) bits and lower bounds of blocks of bits 
allotted to the first factor (f^ [[c]]) of the multiplication and each disposed in the associated 
intervals, S being the number of bits of the secret key {s} and n the number of bits set to 1 of 
the secret key (s). 

Claim 14 (currently amended): The method as claimed in claim 1 1, in which the secret key 
(s) is stored in a memory support of the device by coding numbers of bits, each representative 
of the number of bits separating two blocks of successive bits allotted to the first factor (fi 
[[c]]) of the multiplication. 

Claim 15 (previously presented): The method as claimed in claim 1, in which the 
cryptographic value (y) is produced so as to authenticate the device in a transaction with the 
security application executed outside the device. 

Claim 16 (previously presented): The method as claimed in claim 1, in which the 
cryptographic value (y) is produced in the guise of electronic signature. 

Claim 17 (currently amended): A device with crj^tographic ftinction, comprising^ 
means of interfacing with a security application^ and 



4 



In re Appln. of Girault et al. 
Application No. 10/590,794 

(Revised) Response to Office Action of October 24, 2008 

means of calculation for producing a cryptographic value (y), the means of calculation 
comprising means of multiplication between a first (fj^) and second (f?) [[two]] 
factors including a part at least of a secret key (s) associated with the device, 
wherein, a first factor (fj^) has of tho two factors of the multiplication having a 
determined number of bits L in binary representation, and the second factor 
(fgl of tho two factoris of tho multiplication being constrained so that it 
comprises, in binary representation, several bits set to 1 with, between each 
pair of consecutive bits set to 1, a sequence of at least L - 1 bits set to 0; [[,]] 

means for selecting and memorizing successive binary versions of the first factor bv 
shifting said first factor in accordance with the positions of the bits set to 1 of 
the second factor; and 

means for assembling the successive shifted versions of the selected and memorized 
shifted binarv versions of the first factor, said means for assembling allowing 
said cryptographic operation to be conducted in an absence of any completed 
effective multiplication operation. 

tho multiplication moans comprise moans for assembling binary versions of tho first 
factor, rospoctively shifted in accordance with the positions of tho bits set to 1 
of the second factor. 

Claim 18 (previously presented): The device as claimed in claim 17, furthermore 
comprising means of generating a pseudo-random number (r), the means of calculation 
comprising means for adding the result of the multiplication to or subtracting it from said 
pseudo-random number. 

Claim 19 (currently amended): The device as claimed in claim 18, in which the first and 
second factors (fj^, f? [[s, c]]) and the pseudo-random number (r) are dimensioned so that the 
pseudo-random number is greater than the result of the multiplication. 

Claim 20 (previously presented): The device as claimed in claim 17, in which the means of 
calculation are embodied as hard-wired logic. 
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Claim 21 (currently amended): The device as claimed in claim 17, in which said part of the 

secret key (s) is the first factor £fi} of the multiplication. 

Claim 22 (currently amended): The device as claimed in claim 17, in which said part of the 
secret key (s) is the second factor (f?) of the multiplication. 

Claim 23 (previously presented): The device as claimed in claim 22, furthermore 

comprising a memory adapted for storing data for coding the positions of the bits set to 1 of 
the secret key (s). 
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